From 17993bcdb2a7638bd6e85d80b45b37001ebfd89f Mon Sep 17 00:00:00 2001
From: "sre-read-write[bot]"
 <92993749+sre-read-write[bot]@users.noreply.github.com>
Date: Fri, 20 Sep 2024 13:47:47 +0000
Subject: [PATCH 1/3] chore: synced local '.github/workflows/s3-backup.yml'
 with remote 'tools/sre_file_sync/s3-backup.yml'

---
 .github/workflows/s3-backup.yml | 49 +++++++++++++++++----------------
 1 file changed, 25 insertions(+), 24 deletions(-)

diff --git a/.github/workflows/s3-backup.yml b/.github/workflows/s3-backup.yml
index 82be373..6a8e967 100644
--- a/.github/workflows/s3-backup.yml
+++ b/.github/workflows/s3-backup.yml
@@ -8,31 +8,32 @@ jobs:
   s3-backup:
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
-        with:
-          fetch-depth: 0 # retrieve all history
 
-      - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
-        with:
-          aws-access-key-id: ${{ secrets.AWS_S3_BACKUP_ACCESS_KEY_ID }}
-          aws-secret-access-key: ${{ secrets.AWS_S3_BACKUP_SECRET_ACCESS_KEY }}
-          aws-region: ca-central-1
+    - name: Checkout
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      with:
+        fetch-depth: 0 # retrieve all history
 
-      - name: Create ZIP bundle
-        run: |
-          ZIP_FILE=`basename ${{ github.repository }}`-`date '+%Y-%m-%d'`.zip
-          zip -rq "${ZIP_FILE}" .
-          mkdir -p ${{ github.repository }}
-          mv "${ZIP_FILE}" ${{ github.repository }}
+    - name: Configure AWS credentials
+      uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
+      with:
+        aws-access-key-id: ${{ secrets.AWS_S3_BACKUP_ACCESS_KEY_ID }}
+        aws-secret-access-key: ${{ secrets.AWS_S3_BACKUP_SECRET_ACCESS_KEY }}
+        aws-region: ca-central-1
 
-      - name: Upload to S3 bucket
-        run: |
-          aws s3 sync . s3://${{ secrets.AWS_S3_BACKUP_BUCKET }} --exclude='*' --include='${{ github.repository }}/*'
+    - name: Create ZIP bundle
+      run: |
+        ZIP_FILE=`basename ${{ github.repository }}`-`date '+%Y-%m-%d'`.zip
+        zip -rq "${ZIP_FILE}" .
+        mkdir -p ${{ github.repository }}
+        mv "${ZIP_FILE}" ${{ github.repository }}
 
-      - name: Notify Slack channel if this job failed
-        if: ${{ failure() }}
-        run: |
-          json='{"text":"S3 backup failed in <https://github.com/${{ github.repository }}>!"}'
-          curl -X POST -H 'Content-type: application/json' --data "$json"  ${{ secrets.SLACK_NOTIFY_WEBHOOK }}
+    - name: Upload to S3 bucket
+      run: |
+        aws s3 sync . s3://${{ secrets.AWS_S3_BACKUP_BUCKET }} --exclude='*' --include='${{ github.repository }}/*'
+
+    - name: Notify Slack channel if this job failed
+      if: ${{ failure() }}
+      run: |
+        json='{"text":"S3 backup failed in <https://github.com/${{ github.repository }}>!"}'
+        curl -X POST -H 'Content-type: application/json' --data "$json"  ${{ secrets.SLACK_NOTIFY_WEBHOOK }}

From eb838343b120dc0e3f96f4a19b377535ca9186e7 Mon Sep 17 00:00:00 2001
From: "sre-read-write[bot]"
 <92993749+sre-read-write[bot]@users.noreply.github.com>
Date: Fri, 20 Sep 2024 13:47:50 +0000
Subject: [PATCH 2/3] chore: synced local
 '.github/workflows/backstage-catalog-helper.yml' with remote
 'tools/sre_file_sync/backstage-catalog-helper.yml'

---
 .github/workflows/backstage-catalog-helper.yml | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/backstage-catalog-helper.yml b/.github/workflows/backstage-catalog-helper.yml
index 47aee8d..1a551f2 100644
--- a/.github/workflows/backstage-catalog-helper.yml
+++ b/.github/workflows/backstage-catalog-helper.yml
@@ -25,13 +25,14 @@ jobs:
           app_id: ${{ secrets.SRE_BOT_RW_APP_ID }}
           private_key: ${{ secrets.SRE_BOT_RW_PRIVATE_KEY }}
       - name: Create pull request
-        uses: peter-evans/create-pull-request@v3
+        uses: peter-evans/create-pull-request@6cd32fd93684475c31847837f87bb135d40a2b79 # v7.0.3
         with:
           token: ${{ steps.generate_token.outputs.token}}
-          commit-message: "Add catalog-info.yaml"
-          branch: "backstage/catalog-info"
-          title: "Add catalog-info.yaml"
-          body: "Adding a basic catalog-info.yaml to start populating the backstage catalog with your components."
-          labels: "backstage"
+          sign-commits: true
+          commit-message: 'Add catalog-info.yaml'
+          branch: 'backstage/catalog-info'
+          title: 'Add catalog-info.yaml'
+          body: 'Adding a basic catalog-info.yaml to start populating the backstage catalog with your components.'
+          labels: 'backstage'
           add-paths: |
-            catalog-info.yaml
+            catalog-info.yaml
\ No newline at end of file

From b2b710c2991a96e780da6aaa4c8073e9816aae69 Mon Sep 17 00:00:00 2001
From: "sre-read-write[bot]"
 <92993749+sre-read-write[bot]@users.noreply.github.com>
Date: Fri, 20 Sep 2024 13:47:53 +0000
Subject: [PATCH 3/3] chore: synced local
 '.github/workflows/ossf-scorecard.yml' with remote
 'tools/sre_file_sync/ossf-scorecard.yml'

---
 .github/workflows/ossf-scorecard.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ossf-scorecard.yml b/.github/workflows/ossf-scorecard.yml
index 3577ccd..39bd5ac 100644
--- a/.github/workflows/ossf-scorecard.yml
+++ b/.github/workflows/ossf-scorecard.yml
@@ -25,7 +25,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@fdeb02dc9c3fb721c82a431b2708514aca13dbeb
+        uses: ossf/scorecard-action@6c4912ed9e5f80cfda40164b92753f21f0892cab
         with:
           results_file: ossf-results.json
           results_format: json